CycloneDX/cyclonedx-gradle-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

Stars: 239
Forks: 102
Open beginner issues: 0
Indexed issues: 72
Avg merge: 1d 9h
Merged PRs (30d): 11

Dominant language: Java
License: Apache-2.0
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted

Open All

72 open issues indexed

Set licenses for components Open

CycloneDX/cyclonedx-gradle-plugin#16 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The cyclonedxBom task fails at compileOnly dependencies with version enforced via platform Open

CycloneDX/cyclonedx-gradle-plugin#84 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
BOM generation does not honor overridden dependency versions Open

bug help wanted

CycloneDX/cyclonedx-gradle-plugin#87 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Failing to retrieve licenses Open

CycloneDX/cyclonedx-gradle-plugin#92 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Problem with XMLWriter Open

bug

CycloneDX/cyclonedx-gradle-plugin#97 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CyclonedxBom task fails due to noSuchMethod error in fasterxml.jackson.dataformat Open

CycloneDX/cyclonedx-gradle-plugin#103 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
dependencies with ISO-8859-1 encoding of their POM are skipped Open

CycloneDX/cyclonedx-gradle-plugin#107 · 4 comments · 7 reactions · 0 assignees · Indexed Sep 15, 2026
Error parsing POM skips dependency without logging of maven coordinates Open

CycloneDX/cyclonedx-gradle-plugin#112 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Failed to load json schema: Operation timed out Open

CycloneDX/cyclonedx-gradle-plugin#114 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Gradle variant / attribute issues when running in a multiproject kotlin build Open

CycloneDX/cyclonedx-gradle-plugin#115 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Release 1.5.0 is not available on maven central Open

CycloneDX/cyclonedx-gradle-plugin#116 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The externalReferences are only derived from the maven artifact Open

CycloneDX/cyclonedx-gradle-plugin#120 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is it possible to save the project URL which is stored in the Maven POM Open

CycloneDX/cyclonedx-gradle-plugin#125 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Could the plugin write the components in a sorted order? Open

CycloneDX/cyclonedx-gradle-plugin#126 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
"Bad type on operand stack" Error for plugin 1.5 and up Open

CycloneDX/cyclonedx-gradle-plugin#160 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
allow option to force output of bom even if invalid Open

CycloneDX/cyclonedx-gradle-plugin#207 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
recommend default values setting Open

CycloneDX/cyclonedx-gradle-plugin#218 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bill of materials (BOM) files (.pom files that use <dependencyManagement>) not supported Open

bug

CycloneDX/cyclonedx-gradle-plugin#235 · 2 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Spring/Scala project: No matching variant of XXX was found. Open

CycloneDX/cyclonedx-gradle-plugin#239 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Version-controlled jar files are not included in the BOM Open

CycloneDX/cyclonedx-gradle-plugin#240 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
writeXMLBom faile contains emoji Open

CycloneDX/cyclonedx-gradle-plugin#243 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Missing licenses on multi-module Gradle build Open

CycloneDX/cyclonedx-gradle-plugin#244 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
NoSuchMethodError org.codehaus.plexus.util.xml.pull.MXParser.<init>(org.codehaus.plexus.util.xml.pull.EntityReplacementMap) Open

CycloneDX/cyclonedx-gradle-plugin#246 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
One SBOM file for all dependencies in a multi-module Android project Open

android

CycloneDX/cyclonedx-gradle-plugin#288 · 5 comments · 8 reactions · 0 assignees · Indexed Sep 15, 2026
Generate reproducible outcome Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#292 · 5 comments · 13 reactions · 0 assignees · Indexed Sep 15, 2026
Using versionless dependencies causes `ModuleVersionNotFoundException` Open

bug

CycloneDX/cyclonedx-gradle-plugin#294 · 0 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
Unable to scan library in Web-INF/ Lib Open

CycloneDX/cyclonedx-gradle-plugin#296 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
"Unable to resolve POM" for jars in flatDir repo Open

bug question

CycloneDX/cyclonedx-gradle-plugin#302 · 7 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
MXParser chokes on emojis in POM.xml Open

bug

CycloneDX/cyclonedx-gradle-plugin#304 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Error occurred attempting to read POM Open

bug

CycloneDX/cyclonedx-gradle-plugin#313 · 1 comment · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Gradle 8.4: org.xml.sax.SAXNotRecognizedException: Property 'http://javax.xml.XMLConstants/property/accessExternalSchema' is not recognized. Open

bug help wanted

CycloneDX/cyclonedx-gradle-plugin#349 · 8 comments · 5 reactions · 0 assignees · Indexed Sep 15, 2026
Hello, I have encountered such an error, I do not know how to solve it Open

question

CycloneDX/cyclonedx-gradle-plugin#359 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
I generated the SBOM error through init.gradle. Do you need to make any configuration changes? The error and configuration are as follows. Open

question

CycloneDX/cyclonedx-gradle-plugin#369 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Capture Input Task Names and Extra Build Arguments in BOM Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#387 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Publish BOM files to Artifact repository with JAR file, like Maven plugin Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#388 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Cyclonedx version 1.7.3 causes "No signature of method: org.apache.maven.model.profile.activation.FileProfileActivator.setPathTranslator() is applicable for argument types: (org.apache.maven.model.path.DefaultPathTranslator) " Open

bug question

CycloneDX/cyclonedx-gradle-plugin#405 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Should default config include test scope? Open

good first issue

CycloneDX/cyclonedx-gradle-plugin#416 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
buildEnvironment missing? Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#422 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Copyright notice detection Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#471 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Introduce a way to provide project description Open

enhancement good first issue

CycloneDX/cyclonedx-gradle-plugin#472 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
License lost when migrating from 1.8 to 1.9 for javax dependencies Open

bug

CycloneDX/cyclonedx-gradle-plugin#479 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Overlapping outputs issue with Spring 3.3.x and Gradle 8.x when building multiple BOMs Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#495 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CycloneDX task seems to auto-attach itself as dependency to various standard kotlin tasks Open

bug

CycloneDX/cyclonedx-gradle-plugin#525 · 2 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Run CI tests on Linux, Windows and macOS runners Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#529 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support GradleUp Shadow plugin Open

enhancement

CycloneDX/cyclonedx-gradle-plugin#569 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
An error occurred attempting to resolve effective POM Open

bug

CycloneDX/cyclonedx-gradle-plugin#571 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
SBOM generation is wrong when the project uses io.spring.dependency-management plugin to override the dependency versions Open

bug

CycloneDX/cyclonedx-gradle-plugin#593 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bootstrap method initialization exception Open

bug

CycloneDX/cyclonedx-gradle-plugin#595 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Validation of sbom file fails for Git VCS url when the remote is using ssh from GitHub Open

bug

CycloneDX/cyclonedx-gradle-plugin#615 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Include OpenCv Library cause a XmlPullParserException Open

bug

CycloneDX/cyclonedx-gradle-plugin#631 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

A short digest of beginner-friendly GitHub issues.